Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgm_code_redeem POST Parameter in user-code-redemption.php, the ulgm_user_first POST Parameter in user-registration-form.php, the ulgm_user_last POST Parameter in user-registration-form.php, the ulgm_user_email POST Parameter in user-registration-form.php, the ulgm_code_registration POST Parameter in user-registration-form.php, the ulgm_terms_conditions POST Parameter in user-registration-form.php, the _ulgm_total_seats POST Parameter in frontend-uo_groups_buy_courses.php, the uncanny_group_signup_user_first POST Parameter in group-registration-form.php, the uncanny_group_signup_user_last POST Parameter in group-registration-form.php, the uncanny_group_signup_user_login POST Parameter in group-registration-form.php, the uncanny_group_signup_user_email POST Parameter in group-registration-form.php, the success-invited GET Parameter in frontend-uo_groups.php, the bulk-errors GET Parameter in frontend-uo_groups.php, or the message GET Parameter in frontend-uo_groups.php.

• https://gist.github.com/michiiii/81d801f563138abe7da61e2d95342202
• https://www.uncannyowl.com/knowledge-base/uncanny-learndash-groups-changelog/
• https://gist.github.com/michiiii/81d801f563138abe7da61e2d95342202
• https://www.uncannyowl.com/knowledge-base/uncanny-learndash-groups-changelog/

• Uncannyowl » Uncanny Groups For Learndash » Version: N/A
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:-
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.0
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.0
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.0.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.0.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.0.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.0.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.1.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.1.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.1.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.1.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.3
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.4
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.4
• Uncannyowl » Uncanny Groups For Learndash » Version: 1.4.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:1.4.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.0
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.0
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.3
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.4
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.4
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.5
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.5
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.6
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.6
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.6.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.6.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 2.7
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:2.7
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.0
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.0
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.0.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.0.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.0.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.0.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.0.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.0.3
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.0.4
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.0.4
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.0.5
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.0.5
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1.3
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1.4
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1.4
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1.5
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1.5
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.1.6
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.1.6
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.3
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.3.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.3.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.10
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.10
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.3
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.4
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.4
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.5
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.5
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.6
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.6
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.7
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.7
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.8
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.8
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.4.9
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.4.9
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.5
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.5
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.5.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.5.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.5.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.5.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.6
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.6
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.6.1
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.6.1
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.6.2
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.6.2
• Uncannyowl » Uncanny Groups For Learndash » Version: 3.6.3
  cpe:2.3:a:uncannyowl:uncanny_groups_for_learndash:3.6.3